HTTP/1.1 200 OK
Cache-Control: private, no-store, proxy-revalidate, max-age=30
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: Fri, 26 Aug 2022 07:38:52 GMT
X-UA-Compatible: IE=edge
X-Frame-Options: DENY
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-Xss-Protection: 1
Content-Security-Policy: default-src 'none'; connect-src 'self' https://apps.mynycb.com https://maps.googleapis.com https://www.googletagmanager.com http://www.googleadservices.com http://www.google-analytics.com  http://bat.bing.com https://googleads.g.doubleclick.net https://www.google.com https://bid.g.doubleclick.net https://www.onlinebanktours.com; font-src 'self' https://apps.mynycb.com https://fonts.googleapis.com https://fonts.gstatic.com; media-src 'self' https://www.onlinebanktours.com; object-src 'self'; form-action 'self' https://onlinebanking.mynycb.com https://nycb.olbanking.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apps.mynycb.com https://www.googletagmanager.com https://googleapis.com https://maps.googleapis.com https://polyfill.io http://www.googleadservices.com http://www.google-analytics.com  http://bat.bing.com https://googleads.g.doubleclick.net https://www.google.com https://bid.g.doubleclick.net https://www.onlinebanktours.com; style-src 'self' 'unsafe-inline' https://apps.mynycb.com https://maps.googleapis.com https://www.googletagmanager.com http://www.googleadservices.com http://www.google-analytics.com https://fonts.googleapis.com  http://bat.bing.com https://googleads.g.doubleclick.net https://www.google.com https://bid.g.doubleclick.net https://www.onlinebanktours.com; frame-src http://www.onlinebanktours.com; frame-ancestors 'self' https://www.googletagmanager.com http://www.googleadservices.com http://www.google-analytics.com  http://bat.bing.com https://googleads.g.doubleclick.net https://www.google.com https://bid.g.doubleclick.net https://www.onlinebanktours.com https://cdn.oectours.com; img-src 'self' data: https://apps.mynycb.com https://www.googletagmanager.com http://www.googletagmanager.com/ https://maps.googleapis.com http://www.googleadservices.com http://www.google-analytics.com https://developers.google.com https://googleapis.com https://maps.gstatic.com  http://bat.bing.com https://googleads.g.doubleclick.net https://www.google.com https://bid.g.doubleclick.net https://www.onlinebanktours.com https://cdn.oectours.com; child-src 'self' https://www.googletagmanager.com http://www.googleadservices.com http://www.google-analytics.com  http://bat.bing.com https://googleads.g.doubleclick.net https://www.google.com https://bid.g.doubleclick.net https://www.onlinebanktours.com https://cdn.oectours.com;
Strict-Transport-Security: max-age=31536000
Date: Fri, 26 Aug 2022 07:38:52 GMT
Content-Length: 45506